NIST SP 800-171 Compliance Assessment & System Security Plan (SSP) Development

This contract involves conducting a comprehensive NIST SP 800-171 assessment of information systems to evaluate compliance with security requirements for protecting Controlled Unclassified Information (CUI). The contractor is tasked with identifying any control gaps in the existing security measures and developing or updating the System Security Plan (SSP) accordingly to ensure compliance and enhance the security posture. The completed assessment findings and documentation must be submitted to the Supplier Performance Risk System (SPRS) for review and record-keeping. The work is to be performed as a subcontract for the Department of Defense's DLA Maritime office located in Portsmouth, with the place of performance specified as Kittery, ZIP code 03904. The solicitation was posted on May 19, 2026, with a response deadline of May 29, 2026. This effort falls under the NAICS code 541611, which covers Administrative Management and General Management Consulting Services, emphasizing the consulting nature of the security compliance work. No specific set-aside or organization type requirements are mentioned in the contract details.